Skip to content

laravel@0.1.1

Choose a tag to compare

@cris005 cris005 released this 03 Jul 04:22
laravel@0.1.1
c6453fa

Changed

  • laravel-models: reversed the mass-assignment guidance — models must define an explicit $fillable allowlist (or the #[Fillable] attribute). Removed the previous Model::unguard() recommendation, which contradicted laravel-owasp-security's injection-prevention rule. Ownership/system fields (user_id, is_admin, …) stay out of $fillable and are set explicitly alongside $request->validated().

First tagged release of the Laravel toolkit plugin (16 backend skills, laravel-backend-specialist agent, 4 path-scoped rules); 0.1.1 supersedes the untagged 0.1.0.